CVE-2025-13347: Critical SQL Injection Flaw in SourceCodester Train Station Ticketing System 1.0

Overview

CVE-2025-13347 describes a SQL injection vulnerability discovered in SourceCodester Train Station Ticketing System version 1.0. This flaw allows a remote attacker to inject malicious SQL code via the ‘Username’ parameter when saving a user, potentially compromising the application’s database. The vulnerability exists in the /ajax.php?action=save_user endpoint.

Technical Details

The vulnerability stems from insufficient input validation and sanitization of the ‘Username’ parameter in the /ajax.php?action=save_user endpoint. An attacker can inject SQL code within this parameter, leading to the execution of arbitrary SQL queries on the backend database. This can allow the attacker to:

• Bypass authentication
• Extract sensitive data (user credentials, financial information, etc.)
• Modify or delete data in the database
• Potentially gain control of the underlying server (in severe cases)

The exploit has been published, increasing the risk of exploitation in the wild.

CVSS Analysis

The vulnerability has been assigned a CVSS score of 6.3, indicating a MEDIUM severity. This is calculated as follows (estimation, based on typical SQL injection vectors):

• CVSS Score: 6.3
• Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
• Explanation:
  • AV:N (Network): The vulnerability is exploitable over the network.
  • AC:L (Low): The attack complexity is low, meaning it’s relatively easy to exploit.
  • PR:N (None): No privileges are required to exploit the vulnerability.
  • UI:N (None): User interaction is not required.
  • S:U (Unchanged): The security impact is limited to the affected component.
  • C:L (Low): Limited impact on data confidentiality.
  • I:L (Low): Limited impact on data integrity.
  • A:N (None): No impact on system availability.

While the impact on availability is none, the potential for data leakage and modification makes this a serious issue.

Possible Impact

Successful exploitation of this vulnerability can have significant consequences:

• Data Breach: Sensitive information such as user credentials, personal data, and financial details could be exposed.
• Account Takeover: Attackers could gain unauthorized access to user accounts.
• Data Manipulation: Critical data within the Train Station Ticketing System could be modified or deleted, leading to operational disruptions.
• Reputational Damage: A successful attack could severely damage the reputation of the Train Station Ticketing System provider and any organization using the affected software.

Mitigation and Patch Steps

To mitigate this vulnerability, the following steps are recommended:

1. Apply the Patch: The most effective solution is to apply the official patch released by SourceCodester, if available. Contact them directly for patch information.
2. Input Validation: Implement robust input validation and sanitization for all user-supplied data, especially the ‘Username’ parameter in the /ajax.php?action=save_user endpoint. Use parameterized queries or prepared statements to prevent SQL injection.
3. Web Application Firewall (WAF): Deploy a Web Application Firewall (WAF) to detect and block malicious SQL injection attempts. Configure the WAF with rules specifically designed to protect against SQL injection attacks.
4. Least Privilege Principle: Ensure that the database user account used by the application has only the minimum necessary privileges.
5. Regular Security Audits: Conduct regular security audits and penetration testing to identify and address potential vulnerabilities.

References

GitHub Issue: https://github.com/puppytgyh/-CVE/issues/17
VulDB: https://vuldb.com/?ctiid.332765
VulDB ID: https://vuldb.com/?id.332765
SourceCodester: https://www.sourcecodester.com/